Appl. No. 09/822,986 

Amdt. Dated 01/19/2005 

Reply to Office Action of October 21, 2004 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1. (Currently Amended) A platform comprising: 
a processor; and 

a memory coupled to the processor, the memory including an isolated memory area, 
being a portion of the memory accessible by the processor only when the processor is operating 
in an isolated execution mode, containing a file checker executable by the processor, the file 
checker including (i) a file analyzer to perform a scan operation on a file to produce a scanning 
result and (ii) a signature generator to produce a digital signature chain including a digital 
signature having the scanning result. 

2. (Original) The platform of claim 1, wherein the scan operation by the file checker 
is a virus detection function. 

3. (Original) The platform of claim 1 wherein the incoming file is prevented from 
being executed if the verified digital signature chain indicated an unacceptable file integrity. 

4. (Original) The platform of claim 1, wherein the incoming file is accessed if the 
verified digital signature chain indicates acceptable file integrity. 

5. (Original) The platform of claim 1 further comprising a first control unit coupled 
to both the processor and the memory. 

6. (Original) The platform of claim 5 further comprising a second control unit 
coupled to the first control unit and a token bus interface. 

7. (Original) The platform of claim 6 further comprising a non-volatile memory 
coupled to the second control unit. 
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8. (Original) The platform of claim 6 further comprising input/output devices 
coupled to the second control unit. 

9. (Original) The platform of claim 2 wherein the file analyzer is one of a virus 
detector, an intrusion detector, and a file integrity checker. 

10. (Original) The platform of claim 1 wherein the signature generator comprises: 
an encryptor to encrypt the scanning result using a signature key; and 

a time stamper coupled to the encryptor to time stamp the encrypted result using a time 
indicator, the time stamped encrypted result corresponding to the digital signature. 

1 1 . (Currently Amended) The apparatus p latform of claim 10 wherein the time 
indicator is one of a calendar time and a version identifier of the scanner. 

12. (Currently Amended) The apparatus platform of claim 1 wherein the file is code. 

13. (Currently Amended) A method comprising: 

determining whether a digital signature chain accompanies a file to be accessed; a**d 
entering into an isolated execution mode if the file does not have a corresponding digital 
signature chain; 

analyzing an integrity of the file; 

issuing the digital signature chain if the file has an acceptable file integrity; and 
verifying the digital signature chain of the file by determining (i) whether the file has an 

acceptable file integrity, and (ii) whether each signatory providing the digital signature chain is 

authorized. 

14. (Original) The method of claim 13 further comprising: 
precluding access to the file if the file has an unacceptable file integrity. 

15. (Original) The method of claim 14 further comprising: 
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precluding access to the file if at least one signatory of the digital signature chain is 
unauthorized. 

16. (Cancelled). 

17. (Currently Amended) The method of claim 4-6-13 further comprising: 

issuing the digital signature chain with an indication that the file integrity is unacceptable 
if the integrity of the file is analyzed and determined to be unacceptable. 

18. (Original) The method of claim 13 further comprising: 

opening the file if the verified digital signature chain indicates an acceptable file 
integrity; and 

refusing to open the file if the verified digital signature chain indicates an unacceptable 
file integrity. 

19. (Currently Amended) A computer program embodied in a processor readable 
medium and executable by a processing unit, comprising: 

code for determining whether a digital signature chain accompanies a file to be accessed, 
entering into an isolated execution mode if the file does not have a corresponding digital 
signature chain, and issuing the digital signature chain if the file has an acceptable file integrity ; 
and 

code for verifying the digital signature chain of the file by determining (i) whether the 
file has an acceptable file integrity, and (ii) whether each signatory providing the digital 
signature chain is authorized. 

20. (Original) The method of claim 19 further comprising: 

code for precluding access to the file if the file has an unacceptable file integrity. 

21. (Original) The method of claim 19 further comprising: 
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code for precluding access to the file if at least one signatory of the digital signature chain 
is unauthorized. 
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